On Tue, Mar 26, 2013 at 6:43 PM, Nate Klingenstein <ndk at internet2.edu> wrote: > Yes, exactly right. You might also want to flag the https:// one with > isDefault="true". Right, if your federation supports that ;-) Barring that, list the "default" endpoint first. Tom